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AMENDMENTS TO THE CLAIMS 

Please amend the claims as indicated hereafter (where underlining "_" denotes additions 
and strikethrough "-" denotes deletions). 
Claims: 

1 . (Previously Presented) Apparatus for representing entitlements for instances of services 
having entitlement IDs associated therewith in a receiver, the apparatus comprising: 

a port for receiving instances of service and at least a first message having an 
entitlement ID associated with a given instance of service; 

a memory having a starting entitlement ID and an indexed map of entitlement values for 
entitlements associated with instances of service, wherein the starting entitlement 
ID is used with the entitlement ID associated with the given instance of service to 
determine an index into the map for determining the entitlement value associated 
with the given instance of service, responsive to the entitlement value being a 
predetermined value, the receiver is entitled to the given instance of a service, and 
responsive to the receiver being entitled, the receiver grants access to the given 
instance of service. 

2. (Original) The apparatus of claim 1, wherein the map represents a sequence of 
entitlement IDs. 

3. (Previously Presented) The apparatus of claim 2, wherein the starting entitlement ID 
corresponds to the first entitlement ID in the sequence of entitlement IDs. 

4. (Original) The apparatus of claim 3, wherein the sequence of entitlement IDs is a list. 

5. (Original) The apparatus of claim 3, wherein the sequence of entitlement IDs is 
contiguous in the memory. 
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6. (Original) The apparatus of claim 5, wherein the map is a bit map representing the 
presence or absence of entitlements for the receiver for instances of service. 

7. (Previously Presented) The apparatus of claim 3, wherein: 

the map is represented by an array of elements having entitlement values that represent 

the presence or absence of entitlement; and 
the index into the map is the difference in the sequence of entitlement IDs between the 

starting entitlement ID and the entitlement ID associated with the given instance 

of service. 

8. (Original) The apparatus of claim 7, wherein: 

the array has single-bit elements and the state of an element's bit indicates whether the 
receiver has the entitlement value represented by the array element. 

9. (Original) The apparatus of claim 1, wherein: 

the memory is accessible only to an access control component of the receiver. 

10. (Original) The apparatus of claim 9, wherein: 

the starting entitlement ID and the map are set in response to a message received in the 
receiver. 

1 1 . (Original) The apparatus of claim 1 , wherein: 

the starting entitlement ID and the map are set in response to a message received in the 
receiver. 

12. (Original) The apparatus of claim 1 1 ; wherein: 

the message contains a message starting entitlement ID and message map from which the 
starting entitlement ED and the map are set. 
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13. (Previously Presented) The apparatus of claim 12, wherein: 

the memory includes at least a second map and at least a second starting entitlement ID, 
wherein the first map and the first starting entitlement ID are associated with a 
first entitlement agent, and the at least second map and the at least second starting 
entitlement ID are associated with at least a second entitlement agent, wherein the 
first message specifies the first entitlement agent and a second message specifies 
the at least second entitlement agent, responsive to the second message the at least 
second map and the at least second starting entitlement ID are set. 

14. (Original) The apparatus of claim 1, further comprising: 

a time value that indicates a time at which the entitlement values are not valid. 

15. (Original) A method of providing a receiver with entitlements for instances of a service, 
the method comprising the steps of: 

making a representation of entitlements that includes a starting entitlement ID and a map 
that specifies a set of entitlement values; and 

sending a message to the receiver that contains the representation, wherein the receiver 
responds to the message by storing the representation and using the starting 
entitlement ID with the map and with an entitlement ED associated with a given 
instance of service to determine whether the receiver has an entitlement value for 
the given instance of a service. 

16. (Previously Presented) The method of claim 15, wherein the map represents a sequence of 
entitlement IDs. 

17. (Previously Presented) The method of claim 16, wherein the starting entitlement ID is the 
first entitlement ID in the sequence of entitlement IDs. 

18. (Previously Presented) The method of claim 17, wherein the sequence of entitlement IDs 
is a list. 



-4- 



Akins et al 
. Serial No. 09/930,901 

19. (Previously Presented) The method of claim 17, wherein the sequence of entitlement IDs 
is contiguous in the memory. 

20. (Previously Presented) The method of claim 19, wherein the map is a bit map 
representing the presence or absence of entitlements for the receiver for instances of service. 

2 1 . (Previously Presented) The method of claim 1 7, wherein: 

the map is represented by an array whose elements have entitlement values that represent 

the presence or absence of entitlement; and 
the difference between the starting entitlement ID and the entitlement ID of the given 

instance of service is used to determine the index value for an element in the 

array, wherein the element having the index value represents the entitlement value 

of the given instance of service. 

22. (Original) The method of claim 2 1 , wherein: 

the array has single-bit elements and the state of an elements bit indicates whether the 
receiver has the entitlement value represented by the array element. 

23. (Previously Presented) The method of claim 15, wherein: 

the receiver is given entitlements by at least one entitlement agent; and the method further 
includes the steps of: 

putting a specification of a given entitlement agent in the message, wherein the receiver 
uses the specification to locate a list whose elements include an apparatus for 
representing entitlements and uses the representation of entitlements in the 
message to set the apparatus in the list for the given entitlement agent. 
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24. (Original) The method of claim 15, further comprising the steps of: 

putting a time value that indicates a time at which the representation is not valid in the 
message; and 

the receiver storing the time value and using the time value to determine whether the 
representation is valid. 

25. (Original) The method of claim 15, further comprising the step, in the receiver, of: 
determining that the receiver has an entitlement value for the given instance of service; 
processing, in a secure element, a long-term key to obtain a short-term key; and 
using the short-term key to decrypt the given instance of service. 

26. (Original) The method of claim 15, wherein the sending step comprises the step of: 
sending to the receiver a long-term key within the message. 

27. (Original) The method of claim 15, wherein the message including the entitlement ID is 
authenticated by the receiver using information provided by an entitlement agent. 

28. (Original) The method of claim 15, wherein authentication is performed using RSA 
digital signatures. 
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29. (Previously Presented) A receiver for receiving instances of service and entitlement IDs 
associated therewith and entitlement values for the entitlement IDs, the receiver comprising: 

a memory having a starting entitlement ID and an indexed map of entitlement values that 
have been given to the receiver stored therein, wherein the map of entitlement 
values includes a particular entitlement value for a given instance of service 
having a particular entitlement ID associated therewith; 

a processor in communication with the memory adapted to use the starting entitlement ID 
in conjunction with the particular entitlement ID associated with the given 
instance of service to determine an index into the map for determining the 
particular entitlement value, wherein responsive to the particular entitlement value 
being a predetermined value, the receiver is entitled to the given instance of 
service, and responsive to the receiver being entitled the processor [the 
entitlement of the receiver for the given instance of service, and wherein the 
receiver] grants access to the given instance of service. 

30. (Original) The receiver of claim 29, wherein the map represents a sequence of entitlement 
IDs. 

3 1 ; (Previously Presented)The receiver of claim 30, wherein the sequence of entitlement IDs 
corresponds to a discrete list of entitlement IDs. 

32. (Original) The receiver of claim 30, wherein the starting entitlement ID is the first 
entitlement ID in the sequence of entitlement IDs. 

33. (Original) The receiver of claim 30, wherein the map is represented by an array of 
elements having entitlement values stored therein, and the index number of the element in the 
array having the entitlement value for a given instance of service is determined from the 
sequence of entitlements IDs by the difference between the starting entitlement ID and the 
entitlement ID for the given instance of service. 
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34. (Original) The receiver of claim 29, wherein the array is a bit map. 

35. (Original) The receiver of claim 29, wherein the memory is accessible only to an access 
control component. 

36. (Original) The receiver of claim 29, wherein the starting entitlement ED and the map are 
set in response to a message received in the receiver. 

37. (Currently Amended) A method of determining entitlements for instances of service in a 
receiver, the method comprising the steps, in the receiver, of: 

receiving at least a first message having a starting entitlement ID and a map having 
entitlement values that represent entitlements of the receiver for instances of 
service; 

storing in a memory at least the starting entitlement ID and the map of the first message; 
receiving at least a second message having an entitlement ID associated with a given 

instance of service; and 
determining whether the receiver is entitled to the instance of service by using the starting 

entitlement ID and the entitlement ID associated with the given instance of service 

to determine an element of the map which has the entitlement value of the given 

instance of service; 

wherein the map is an indexed map of entitlement values for entitlements associated with 
instances of service, wherein the starting entitlement ID is used with the 
entitlement ID associated with the given instance of service to determine an index 
into the map for determining the entitlement value associated with the given 
instance of service, responsive to the entitlement value being a predetermined 
value, the receiver is entitled to the given instance of a service, and responsive to 
the receiver being entitled, the receiver grants access to the given instance of 
service. 
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38. (Original) The method of claim 37, wherein the map is stored as an array, the starting 
entitlement ID is the first entitlement ID in a sequence of entitlement IDs including the 
entitlement ID associated with the given instance of service, and the difference in the sequence 
between the starting entitlement ID and the entitlement ID associated with the given instance of 
service is used to determine an element in the array having the entitlement value for the given 
instance of service. 

39. (Original) The method of claim 38, wherein the map is a bit map. 

40. (Original) The method of claim 37, further including: 

receiving at least a second message that specifies a given entitlement agent; and 
allocating a portion of the memory to the given entitlement agent. 

41 . (Original) The method of claim 40, further comprising: 

receiving at least a third message having a starting entitlement ED and a map; 
storing the starting entitlement ID and the map of the at least third message in the portion 
of the memory allocated to the given entitlement agent. 

42. (Original) The method of claim 37, wherein the first message further includes a time 
indicator representing expiration date of the entitlements and the storing step further includes 
storing the expiration date; and wherein the determining step further includes: 

determining whether the entitlement value for the given instance of service has expired. 

43. (Original) The method of claim 37, further comprising the steps of: 
receiving a third message having a long-term key; 

processing in a secure element the long-term key to obtain a short-term key; and 
decrypting the given instance of service with the short-term key. 

44. (Original) The method of claim 38, further comprising the step of: 
authenticating the first message using information provided by an entitlement agent. 
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45. (Original) The method of claim 44, wherein the step of authentication is performed by 
using RSA digital signatures. 
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